Karn Ganeshan

A Cross-site Request Forgery issue allows an attacker to perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious request.

An issue with improper authentication was found, allowing access to an undocumented BusyBox Linux shell over the TELNET service without authentication. This could enable a remote attacker to bypass authentication procedures and gain access to the shell.